From 674f68cd18c129fe7cb6f8f4d456e2daaddfacbf Mon Sep 17 00:00:00 2001 From: Blai Peidro Date: Mon, 12 Oct 2026 22:48:32 +0200 Subject: [PATCH] fix: name enforce as the default launch validation in the .env --- .env | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.env b/.env index 770e8ec..0c4e310 100644 --- a/.env +++ b/.env @@ -153,8 +153,9 @@ ADMIN_PASSWORD=AnsibleForms!123 # EXTRAVARS_USER_FIELDS= # Check every launch on the server against the form's validation rules -# off (default), log (report only) or enforce (refuse invalid launches) -# LAUNCH_VALIDATION=off +# off, log (report only) or enforce (refuse invalid launches) +# Default: enforce +# LAUNCH_VALIDATION=enforce # What server-side expressions may do: off, paranoid, strict (default) or legacy # legacy allows remote code execution for every logged-in user - temporary escape hatch only